FILE-OFFICE Microsoft Office Excel SxView heap overflow attempt

Description

Detects a workbook exploiting CVE-2010-0821, a heap overflow in Excel pivot table view record handling that can allow code execution. The rule matches the crafted view records that public exploits use to overflow the parser buffer.

CVEs

Related malware families

References

• docs.microsoft.com →